Cisco Technology, Inc.

Todd Short

Vincent E Parla

Andrew Zawadowskiy

Antonio Martin

Marc Tardif

David A McGrew

Siva S Jayasenan

Senthil M Sivakumar

Mahadev Somasundaram

David Mcgrew

Yongming Zhang

Heng-Chun Chen

Igor V Zubenko

David Brownhill

A method for providing authoritative application-based routing and an improved application firewall, as well as a method for application classification, is described. The first embodiment, which provides a method for authoritative application-based routing, comprises tagging packets with an application identifier, and pushing the tagged packets to the network to enable the application identifier to be used in routing and priority decisions. In the second embodiment, a method for improving application firewall comprises using the application identifier to minimize the amount of processing required by the firewall when analyzing packet information.

Method for providing authoritative application-based routing and an improved application firewall

Flow-based data compression is achieved by selecting which of a set flows are compressed, which packets within each flow are compressed, and the level of effort applied to compress each packet. Compression scheduling across multiple flows excludes certain packets in respective flows from compression by way of skip patterns in a table or that are generated by a geometrically progressive skip scheme. Compression scheduling may include adjusting the level of compression effort.

Flow-based compression management

Techniques are provided for transmitting data securely across virtual private network (VPN) connections. A first VPN connection is initiated between a first device and a second device. The second device selects a first communication protocol to be used for the first VPN connection with the first device. The first device generates session identification data associated with the first VPN connection and sends the session identification data to the second device over the first VPN. The second device receives the session identification data and stores it. The second device determines when the first VPN connection has been disrupted. The second device then selects a second communication protocol and initiates a second VPN connection using the second communication protocol with the first device. The second device transmits the session identification data to the first device, and the first device associates the second VPN connection with the first VPN connection using session identification data.

Dynamic tunneling over virtual private network connections based on network conditions

Disclosed are methods and apparatus for handling requests for data from a private network. In general terms, a client who wishes access to secure data, such as a secure web page, from a private network establishes a secure connection with a secure server, such as a secure socket layer (SSL) server, of the private network. The secure server then downloads a software program for handling data requests (made by the client for data located within the private network) to the client. This software program is downloaded automatically by the secure server to the client when the client initiates a secure connection with such secure server. The downloaded software program is generally configured to modify data requests (e.g., by performing a URL substitution) sent from the client to an internal server of the private network such that the data requests are redirected to the secure server. The secure server then processes the data request (e.g., by retrieving the data from the appropriate internal server).

Solution for handling URL-substitution for data access in a private network architecture

A method, and computer program product for providing dynamically tunneling over an unreliable protocol or a reliable protocol based on network conditions is presented. A connection between a source device and a destination device is established using a reliable protocol. An attempt is then made to utilize an unreliable protocol to communicate between the source device and the destination device. When the attempt to utilize an unreliable protocol is successful, then the unreliable protocol is used to transmit data between the source device and the destination device. When the attempt to utilize the unreliable protocol is unsuccessful, then the reliable protocol connection is used to transmit data between the source device and the destination device.

Method for dynamically tunneling over an unreliable protocol or a reliable protocol, based on network conditions

A method, apparatus and computer program product for performing client-side Java content transformation is presented. A first client request is received at a gateway from a web client, and is transmitted from the gateway to a web server, and then the web page is received at the gateway from the web server. At the gateway, the web page is modified to request a content transformation application and is transmitted from the gateway to the web client. A request is received at the gateway for the content transformation application, and the gateway transmits the content transformation application to the client. The content transformation application is run on the client, wherein the content transformation application acquires the applet requested by the client and performs content translation on the applet, resulting in a content transformed applet, which is then run by the client.

Growing community of inventors

Sudbury, MA, United States of America

Todd Short